$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3138322e3233352e302e302f31362d3234203d3e2039343136.roa File: 3138322e3233352e302e302f31362d3234203d3e2039343136.roa (raw, json) Hash identifier: T7TYvDxNbYnS4ge7XmPML3yJcjYzisgfaDerUoi4/zE= Subject key identifier: 90:D0:70:E1:B1:CC:FC:F9:F5:F6:C7:69:76:42:CD:95:C1:F3:B7:99 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 733C9AEC62E3101CF126518283A2029AFF4E3752 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3138322e3233352e302e302f31362d3234203d3e2039343136.roa Signing time: Mon 22 Jun 2026 02:43:51 +0000 ROA not before: Mon 22 Jun 2026 02:38:51 +0000 ROA not after: Mon 21 Jun 2027 02:43:51 +0000 asID: 9416 IP address blocks: 182.235.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3c:9a:ec:62:e3:10:1c:f1:26:51:82:83:a2:02:9a:ff:4e:37:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 02:38:51 2026 GMT Not After : Jun 21 02:43:51 2027 GMT Subject: CN=90D070E1B1CCFCF9F5F6C7697642CD95C1F3B799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:dc:90:45:71:6e:79:a3:80:e0:1a:15:7a: 3e:65:d9:66:5d:32:c0:2c:f5:48:b1:b3:e1:bf:3d: 59:42:0a:39:87:83:4b:47:f2:91:c1:e1:b5:60:14: 2a:37:b1:0c:99:18:6a:2e:cc:6a:02:2a:1a:66:c9: 61:29:2e:e4:dc:88:bd:8e:21:05:6e:7b:44:bf:bd: 35:3e:74:ac:80:9b:37:11:58:1d:e3:38:a4:dc:d1: 22:ad:28:c6:b0:59:66:a1:e5:bd:76:15:8a:4d:bc: 17:07:26:5f:f1:f0:1b:80:de:50:27:f2:70:ce:e8: 1b:29:8e:42:69:26:63:c3:55:ef:36:0e:1e:f4:76: 43:94:4d:2d:df:5c:c7:96:5f:5b:c9:b5:c2:96:98: 0d:92:cb:87:af:70:a4:7a:bf:f4:23:9b:1e:ed:85: 05:0c:f1:3c:4b:63:3c:ae:ef:9e:c6:11:65:b5:0e: 9c:3d:28:b8:0f:cf:bf:a6:1a:d0:ae:38:0e:fc:e9: 23:38:6e:59:1e:8b:a1:cb:15:01:98:54:07:d3:23: 21:af:a0:b6:1d:14:8c:b6:db:0d:06:ee:60:92:c6: ff:06:f6:7f:ec:d1:94:6d:7c:af:b5:6f:d8:3d:4a: 1d:c9:98:86:b0:3f:e8:b6:a1:9c:76:03:91:fc:10: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D0:70:E1:B1:CC:FC:F9:F5:F6:C7:69:76:42:CD:95:C1:F3:B7:99 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3138322e3233352e302e302f31362d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.235.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:3c:4e:a3:85:3a:91:55:bb:c5:f2:9b:98:4f:00:21:5e:c5: f7:e3:05:97:31:64:5a:9b:27:0a:d6:de:ac:41:8b:98:d3:2c: af:af:f6:0d:11:98:f0:3d:d9:1a:32:74:b4:53:9a:e8:7b:89: b7:d8:9e:64:8a:7a:3c:fb:86:45:99:80:fd:cc:98:ae:2a:53: bd:93:b3:75:43:cd:d3:93:ba:39:ab:ad:35:8d:4d:2f:61:92: 7c:fc:c7:01:6b:78:87:13:71:03:ea:23:55:15:1d:1f:16:ab: 6e:67:52:c0:76:89:f8:87:91:e6:b8:69:1f:ac:8f:6b:ed:dc: 80:f8:06:b6:df:dc:97:d1:8c:5b:68:3d:75:54:00:7a:54:7a: b9:4b:21:c6:32:4e:32:4b:bc:82:97:5a:34:ab:20:1e:c1:1a: b5:d5:c8:99:48:7f:c1:f8:38:4e:d3:59:ce:23:a3:23:b4:24: 15:58:81:92:73:f3:f8:7e:b1:42:a4:74:45:22:21:8c:15:9d: 29:1d:44:94:1d:b0:22:a1:90:2d:fd:4d:33:89:d1:37:f6:78: 62:d5:55:18:40:ef:56:cd:05:8e:a0:ff:0f:1d:36:5d:aa:12: ca:0b:af:43:a2:da:0f:94:b9:5d:78:3c:57:aa:cf:29:df:de: 14:2e:8c:ab -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIUczya7GLjEBzxJlGCg6ICmv9ON1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMjM4NTFaFw0yNzA2MjEwMjQzNTFaMDMxMTAvBgNV BAMTKDkwRDA3MEUxQjFDQ0ZDRjlGNUY2Qzc2OTc2NDJDRDk1QzFGM0I3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cNyQRXFueaOA4BoVej5l2WZd MsAs9Uixs+G/PVlCCjmHg0tH8pHB4bVgFCo3sQyZGGouzGoCKhpmyWEpLuTciL2O IQVue0S/vTU+dKyAmzcRWB3jOKTc0SKtKMawWWah5b12FYpNvBcHJl/x8BuA3lAn 8nDO6BspjkJpJmPDVe82Dh70dkOUTS3fXMeWX1vJtcKWmA2Sy4evcKR6v/Qjmx7t hQUM8TxLYzyu757GEWW1Dpw9KLgPz7+mGtCuOA786SM4blkei6HLFQGYVAfTIyGv oLYdFIy22w0G7mCSxv8G9n/s0ZRtfK+1b9g9Sh3JmIawP+i2oZx2A5H8ECZlAgMB AAGjggHYMIIB1DAdBgNVHQ4EFgQUkNBw4bHM/Pn19sdpdkLNlcHzt5kwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzEzODMyMmUzMjMzMzUyZTMw MmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzkzNDMxMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC26zAN BgkqhkiG9w0BAQsFAAOCAQEAbzxOo4U6kVW7xfKbmE8AIV7F9+MFlzFkWpsnCtbe rEGLmNMsr6/2DRGY8D3ZGjJ0tFOa6HuJt9ieZIp6PPuGRZmA/cyYripTvZOzdUPN 05O6OautNY1NL2GSfPzHAWt4hxNxA+ojVRUdHxarbmdSwHaJ+IeR5rhpH6yPa+3c gPgGtt/cl9GMW2g9dVQAelR6uUshxjJOMku8gpdaNKsgHsEatdXImUh/wfg4TtNZ ziOjI7QkFViBknPz+H6xQqR0RSIhjBWdKR1ElB2wIqGQLf1NM4nRN/Z4YtVVGEDv Vs0FjqD/Dx02XaoSyguvQ6LaD5S5XXg8V6rPKd/eFC6Mqw== -----END CERTIFICATE-----Generated at Tue Jun 30 20:12:59 2026 by rpki-client